Merge branch 'main' into docs/v2.0.0

Author: kmendell

.depot/workflows/deploy-preview.yml

@@ -1,7 +1,7 @@
 name: Build and Deploy Preview
 
 on:
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize, reopened, ready_for_review]
     paths:
       - 'src/**'
@@ -25,6 +25,7 @@ permissions:
 
 jobs:
   build-and-deploy-preview:
+    if: ${{ github.event.pull_request.head.repo.owner.login == 'getarcaneapp' }}
     runs-on: depot-ubuntu-latest
     environment:
       name: ${{ github.event.pull_request.user.login }}-pr-${{ github.event.pull_request.number }}

.depot/workflows/spell-check.yml

@@ -4,17 +4,15 @@ on:
   push:
     branches:
       - main
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize, reopened, ready_for_review]
     branches:
       - main
 
 permissions:
-  actions: read
-  contents: read
-  deployments: write
-  pull-requests: write
+  contents: write
   id-token: write
+  pull-requests: read
 
 jobs:
   check-typos:
@@ -25,12 +23,11 @@ jobs:
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
-          token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Check if this is a changelog PR
         id: check_label
         run: |
-          if [[ "${{ github.event_name }}" == "pull_request_target" ]] \
+          if [[ "${{ github.event_name }}" == "pull_request" ]] \
             && [[ "${{ contains(github.event.pull_request.labels.*.name, 'docs(changelog)') }}" == "true" ]] \
             && [[ "${{ github.event.pull_request.head.repo.full_name }}" == "${{ github.repository }}" ]]; then
             echo "is_changelog_pr=true" >> $GITHUB_OUTPUT

.github/workflows/deploy-preview.yml

@@ -1,7 +1,7 @@
 name: Build and Deploy Preview
 
 on:
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize, reopened, ready_for_review]
     paths:
       - 'src/**'
@@ -25,7 +25,7 @@ permissions:
 
 jobs:
   build-and-deploy-preview:
-    if: ${{ github.repository_owner != 'getarcaneapp' && github.actor != 'getarcaneappbot' }}
+    if: ${{ github.event.pull_request.head.repo.owner.login == 'getarcaneapp' && github.actor != 'getarcaneappbot' }}
     runs-on: depot-ubuntu-latest
     environment:
       name: ${{ github.event.pull_request.user.login }}-pr-${{ github.event.pull_request.number }}

.github/workflows/deploy-prod.yml

@@ -11,7 +11,7 @@ permissions:
 
 jobs:
   deploy:
-    if: ${{ github.repository_owner != 'getarcaneapp' && github.actor != 'getarcaneappbot' }}
+    if: ${{ github.repository_owner == 'getarcaneapp' && github.actor != 'getarcaneappbot' }}
     runs-on: depot-ubuntu-latest
     environment:
       name: production

.github/workflows/spell-check.yml

@@ -4,34 +4,30 @@ on:
   push:
     branches:
       - main
-  pull_request_target:
+  pull_request:
     types: [opened, synchronize, reopened, ready_for_review]
     branches:
       - main
 
 permissions:
-  actions: read
-  contents: read
-  deployments: write
-  pull-requests: write
+  contents: write
   id-token: write
+  pull-requests: read
 
 jobs:
   check-typos:
-    if: ${{ github.repository_owner != 'getarcaneapp' && github.actor != 'getarcaneappbot' }}
     runs-on: depot-ubuntu-latest
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
-          token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Check if this is a changelog PR
         id: check_label
         run: |
-          if [[ "${{ github.event_name }}" == "pull_request_target" ]] \
+          if [[ "${{ github.event_name }}" == "pull_request" ]] \
             && [[ "${{ contains(github.event.pull_request.labels.*.name, 'docs(changelog)') }}" == "true" ]] \
             && [[ "${{ github.event.pull_request.head.repo.full_name }}" == "${{ github.repository }}" ]]; then
             echo "is_changelog_pr=true" >> $GITHUB_OUTPUT

.github/workflows/update-release-assets.yml

@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   update-release-assets:
-    if: ${{ github.repository_owner != 'getarcaneapp' && github.actor != 'getarcaneappbot' }}
+    if: ${{ github.repository_owner == 'getarcaneapp' && github.actor != 'getarcaneappbot' }}
     runs-on: depot-ubuntu-latest
     steps:
       - name: Checkout

package.json

@@ -54,7 +54,7 @@
 		"prettier-plugin-tailwindcss": "^0.8.0",
 		"runed": "^0.37.1",
 		"shiki": "^4.1.0",
-		"svelte": "^5.55.10",
+		"svelte": "^5.56.0",
 		"svelte-check-rs": "^0.9.19",
 		"svelte-toolbelt": "^0.10.6",
 		"tailwind-merge": "^3.6.0",
@@ -68,5 +68,5 @@
 		"vite-plus": "catalog:",
 		"wrangler": "^4.95.0"
 	},
-	"packageManager": "pnpm@11.1.0+sha512.0c44e842e5686b2c061a81adda8b2258bd8818e9704b2cf2c63d56b931a7b2e910092e085027003b96ca3911ab56a07f6df5abaed2be9925034cdd686a535b14"
+	"packageManager": "pnpm@11.5.0+sha512.dbfcc4f81cf48597afd4bc391ffdf12c11f1a9fb83a395bfa6b0a2d9cc2fd8ffebafdb1ccbd529632153f793904c2615b7f09fe1a345473fd1c35845172a8eb1"
 }